Ironically, that agency was created as part of reforms that followed the crisis of 2008 and modeled on a proposal made by Warren when she was a Harvard professor.
But the agency has been sharply criticized by Republicans for overreach. An Reuters article this week reported that Mick Mulvaney, named by President Trump in November to lead the bureau, had decided against pursuing an inquiry into the actions of Equifax. That decision drew criticism from a number of Congressional Democrats, including Rep. David Scott of Atlanta.
Included in Warren’s report were the findings that Equifax:
- had ample warning of weaknesses and risks to its system — before the breach had occurred. "The company failed to heed – or was unable to effectively heed – these warnings," the report said.
- used "feeble monitoring" of security, leaving it unaware of cyber attacks.
- left sensitive information exposed on accessible systems.
- failed to erect technological obstacles to prevent hackers from getting into the crucial data.
However, the report was wrong to include the charge that consumer passport data had been accessed or stolen, said Equifax spokeswoman Meredith Griffanti.
Moreover, the report was wrong to say company officials had not told the truth about the passports during Congressional testimony, she said. “We have looked at the passports as an element of our forensic investigation and that investigation showed that no passports in fact have been affected.”
During testimony to the Senate, Equifax officials provided some technical descriptions of the company's systems, and it may be that staffers "misinterpreted" Equifax' testimony, Griffanti said. "But if you were not clear about something, you should have asked questions."
A spokeswoman for Sen. Warren did not respond to questions about Equifax’s comments on the passport data.
However, Equifax had no comment on other elements of the report, Griffanti said. “I don’t think there’s anything else new in the report.”